This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca7b86b0-1cc8-3c9a-8b77-4d7a4302c0d3.roa
File:                     ca7b86b0-1cc8-3c9a-8b77-4d7a4302c0d3.roa (raw, json)
Hash identifier:          Gcoowa8K5LnzHcABz0jjWjuR1dKcROYKtXk47pIfQ2k=
Subject key identifier:   DA:59:29:28:15:F7:2E:C5:3B:99:CA:B1:B3:73:52:DF:9E:73:F0:24
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584C4B3BE7DA2DBF4BA993647900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca7b86b0-1cc8-3c9a-8b77-4d7a4302c0d3.roa
Signing time:             Wed 24 Dec 2025 14:00:40 +0000
ROA not before:           Wed 24 Dec 2025 14:00:40 +0000
ROA not after:            Tue 24 Mar 2026 13:00:40 +0000
asID:                     21714
IP address blocks:        2001:470:3f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:4b:3b:e7:da:2d:bf:4b:a9:93:64:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec 24 14:00:40 2025 GMT
            Not After : Mar 24 13:00:40 2026 GMT
        Subject: CN=f4bec36e-f8bf-4057-8fb6-957b5638a132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a8:0b:33:f7:78:03:e0:f1:8e:d5:de:3d:f3:
                    c1:03:d0:76:11:93:b4:cc:56:09:b8:e2:e7:1a:7e:
                    7a:a1:4a:f1:77:b6:40:e6:a1:4f:07:bb:71:f5:6e:
                    a7:a4:bd:e6:f7:eb:c8:c7:c6:a2:26:53:d3:56:79:
                    a2:ce:4d:29:aa:e3:a7:30:eb:b3:21:a8:00:a1:16:
                    a2:78:9a:72:89:9b:01:76:fb:49:97:32:04:5a:88:
                    2e:58:02:c1:5c:22:91:eb:f2:db:29:19:d1:cf:48:
                    1a:a5:22:79:b8:62:44:2b:0d:1b:14:2b:77:fc:c0:
                    ef:90:42:86:91:84:33:c2:6b:19:89:93:5c:1f:53:
                    26:88:a8:02:d5:6f:b9:eb:37:56:d0:b7:7f:dc:24:
                    f6:27:88:93:c1:c6:f3:16:74:32:f7:b8:45:f5:78:
                    31:0c:b6:db:a0:ca:a0:99:f9:86:04:af:eb:d0:8e:
                    a2:12:c3:22:15:f2:a9:1f:cc:fe:37:f7:81:10:3f:
                    2d:13:7a:40:8e:9e:d7:84:a6:29:9a:eb:72:a3:19:
                    a5:e7:e1:65:59:b6:2b:b1:01:5b:7b:43:2a:f7:c9:
                    f8:b8:85:c5:eb:5c:35:a2:27:92:30:7e:9c:d1:96:
                    02:42:76:01:c9:f9:e0:8e:48:10:09:b1:39:61:58:
                    4d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:59:29:28:15:F7:2E:C5:3B:99:CA:B1:B3:73:52:DF:9E:73:F0:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca7b86b0-1cc8-3c9a-8b77-4d7a4302c0d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:0d:5c:c7:93:5c:4f:37:90:f4:59:84:0a:02:83:a7:6c:d9:
         83:7f:32:fa:05:9d:fa:e3:3e:ca:14:ec:c9:2d:cc:40:8f:0d:
         d6:00:33:e9:81:3c:51:d8:36:38:49:e7:53:28:58:aa:fe:e7:
         77:de:ad:a3:ab:77:00:f2:fa:26:b8:7c:ba:8d:d8:0b:84:2e:
         d6:fd:bc:2f:81:c3:97:4a:4b:97:38:f4:68:77:e6:49:00:32:
         4b:5e:24:47:0a:57:40:6a:c6:1f:99:dc:98:b1:df:e5:20:b1:
         41:9a:27:39:0f:63:71:15:55:2c:ce:02:18:f1:36:07:3e:4f:
         cc:74:57:0d:93:a3:cd:7f:e9:67:2f:2b:ad:7d:a6:9e:6e:3e:
         3b:4d:d3:a2:e0:24:34:8c:8b:d3:51:f8:23:1d:19:42:32:bc:
         c2:b1:42:2c:68:ec:c4:15:2d:7b:33:f4:b0:f0:cd:69:9f:a6:
         7a:59:8f:0c:be:5f:4c:23:98:cd:fc:2c:e2:f0:c2:00:66:9d:
         24:77:66:41:dc:e6:b2:11:6c:51:e1:47:8e:24:29:d0:e7:20:
         8e:8f:ea:a9:b6:28:12:13:44:aa:da:3b:f5:4c:54:10:83:80:
         19:d0:9b:d5:58:7d:ec:d7:7c:b9:e5:e4:c1:ed:62:34:ae:a8:
         45:23:a4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:54:24 2026 by rpki-client